Flashcards

Quick study sessions to strengthen memory and retain key concepts.

Flashcard Study

Java: Cross-Site Scripting (XSS)

Front

Why is CSRF token usage a critical defense?

CSRF tokens ensure requests are intentionally made by authenticated users. CSRF tokens are unique tokens included in requests…

View Card →
Flashcard Study

Java: Cross-Site Scripting (XSS)

Front

How do Spring Security filters enhance application security?

They process requests through a chain, providing various security features. Spring Security's filter chain processes requests in a…

View Card →
Flashcard Study

Java: Cross-Site Scripting (XSS)

Front

Why is HTML encoding essential for preventing XSS?

It converts special characters to HTML entities, preventing execution. HTML encoding transforms characters like '' into '<' and…

View Card →
Flashcard Study

Java: Cross-Site Scripting (XSS)

Front

How does Salting passwords enhance security?

It ensures each password hash is unique, even if the same password is used. Salting involves adding a…

View Card →
Flashcard Study

Java: Cross-Site Scripting (XSS)

Front

How would you explain a Stateless JWT token in an interview?

A token that contains all necessary information and doesn't require server-side storage. Stateless JWT tokens are self-contained tokens…

View Card →
Flashcard Study

Java: Cross-Site Scripting (XSS)

Front

How does HTML encoding help prevent Stored XSS?

It transforms user input into safe HTML entities. HTML encoding prevents Stored XSS by converting potentially dangerous characters…

View Card →
Flashcard Study

Java: Cross-Site Scripting (XSS)

Front

Why use stored procedures for SQL queries?

Stored procedures separate data from SQL logic, reducing injection risk. Stored procedures execute pre-defined SQL queries on the…

View Card →
Flashcard Study

Java: Cross-Site Scripting (XSS)

Front

How does the 'Signature' part of a JWT contribute to security?

The 'Signature' ensures the token's integrity and authenticity. The 'Signature' in a JWT is created by signing the…

View Card →
Flashcard Study

Java: Cross-Site Scripting (XSS)

Front

How would you explain a potential risk of improperly validated JWTs in an interview?

They can lead to unauthorized access if not properly validated. Improperly validated JWTs can be exploited by attackers…

View Card →
Flashcard Study

Java: Cross-Site Scripting (XSS)

Front

What does HTML encoding protect against?

HTML encoding protects against Cross-Site Scripting (XSS) attacks. HTML encoding transforms special characters into HTML entities, preventing malicious…

View Card →